CVE-2008-1105
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through...
7.5 HighPublic exploitFix available
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
Exploit likelihood
69.1%Up 50.5 points since Feb 4, 2022
What each source reports
NVD Score used
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
CVE-2008-1105- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
CVE-2008-1105- Updated
- 2026-11-02
EUVDEUVD-2008-1114 No score
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
EUVD-2008-1114- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-38xm-32fr-cm7j No score
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through...
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
GHSA-38xm-32fr-cm7j- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
CVE-2008-1105- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-1105 No score
Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0 through 3.0.29 allows remote attackers to execute arbitrary code via a crafted SMB response.
- Record
DEBIAN-CVE-2008-1105- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10683-1 No score
cifs-utils-6.13-1.3 on GA media
These are all security issues fixed in the cifs-utils-6.13-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10683-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11365-1 No score
ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media
These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11365-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 1:3.0.30-1 | 1:3.0.30-1 |
sambaDebian:13 |
before 1:3.0.30-1 | 1:3.0.30-1 |
sambaDebian:14 |
before 1:3.0.30-1 | 1:3.0.30-1 |
sambaDebian:4.0 |
before 3.0.24-6etch10, plus listed versions 3.0.24-63.0.24-6etch13.0.24-6etch23.0.24-6etch43.0.24-6etch5 Show 4 moreShow less3.0.24-6etch63.0.24-6etch73.0.24-6etch83.0.24-6etch9 |
3.0.24-6etch10 |
sambaRed Hat:enterprise_linux:2.1::as |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-clientRed Hat:enterprise_linux:2.1::as |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-commonRed Hat:enterprise_linux:2.1::as |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-swatRed Hat:enterprise_linux:2.1::as |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
sambaRed Hat:enterprise_linux:2.1::aw |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-clientRed Hat:enterprise_linux:2.1::aw |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
Show 72 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-commonRed Hat:enterprise_linux:2.1::aw |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-swatRed Hat:enterprise_linux:2.1::aw |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
sambaRed Hat:enterprise_linux:2.1::es |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-clientRed Hat:enterprise_linux:2.1::es |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-commonRed Hat:enterprise_linux:2.1::es |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-swatRed Hat:enterprise_linux:2.1::es |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
sambaRed Hat:enterprise_linux:2.1::ws |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-clientRed Hat:enterprise_linux:2.1::ws |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-commonRed Hat:enterprise_linux:2.1::ws |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
samba-swatRed Hat:enterprise_linux:2.1::ws |
before 0:2.2.12-1.21as.9.3 | 0:2.2.12-1.21as.9.3 |
sambaRed Hat:enterprise_linux:3::as |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-clientRed Hat:enterprise_linux:3::as |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-commonRed Hat:enterprise_linux:3::as |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-debuginfoRed Hat:enterprise_linux:3::as |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-swatRed Hat:enterprise_linux:3::as |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
sambaRed Hat:enterprise_linux:3::desktop |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-clientRed Hat:enterprise_linux:3::desktop |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-commonRed Hat:enterprise_linux:3::desktop |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-swatRed Hat:enterprise_linux:3::desktop |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
sambaRed Hat:enterprise_linux:3::es |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-clientRed Hat:enterprise_linux:3::es |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-commonRed Hat:enterprise_linux:3::es |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-debuginfoRed Hat:enterprise_linux:3::es |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-swatRed Hat:enterprise_linux:3::es |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
sambaRed Hat:enterprise_linux:3::ws |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-clientRed Hat:enterprise_linux:3::ws |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-commonRed Hat:enterprise_linux:3::ws |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
samba-swatRed Hat:enterprise_linux:3::ws |
before 0:3.0.9-1.3E.15 | 0:3.0.9-1.3E.15 |
sambaRed Hat:enterprise_linux:4::as |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-clientRed Hat:enterprise_linux:4::as |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-commonRed Hat:enterprise_linux:4::as |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-swatRed Hat:enterprise_linux:4::as |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
sambaRed Hat:enterprise_linux:4::desktop |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-clientRed Hat:enterprise_linux:4::desktop |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-commonRed Hat:enterprise_linux:4::desktop |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-swatRed Hat:enterprise_linux:4::desktop |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
sambaRed Hat:enterprise_linux:4::es |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-clientRed Hat:enterprise_linux:4::es |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-commonRed Hat:enterprise_linux:4::es |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-swatRed Hat:enterprise_linux:4::es |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
sambaRed Hat:enterprise_linux:4::ws |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-clientRed Hat:enterprise_linux:4::ws |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-commonRed Hat:enterprise_linux:4::ws |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
samba-swatRed Hat:enterprise_linux:4::ws |
before 0:3.0.25b-1.el4_6.5 | 0:3.0.25b-1.el4_6.5 |
sambaRed Hat:rhel_eus:4.5::as |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-clientRed Hat:rhel_eus:4.5::as |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-commonRed Hat:rhel_eus:4.5::as |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-debuginfoRed Hat:rhel_eus:4.5::as |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-swatRed Hat:rhel_eus:4.5::as |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
sambaRed Hat:rhel_eus:4.5::es |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-clientRed Hat:rhel_eus:4.5::es |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-commonRed Hat:rhel_eus:4.5::es |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-debuginfoRed Hat:rhel_eus:4.5::es |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
samba-swatRed Hat:rhel_eus:4.5::es |
before 0:3.0.10-2.el4_5.3 | 0:3.0.10-2.el4_5.3 |
sambaRed Hat:enterprise_linux:5::client |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-clientRed Hat:enterprise_linux:5::client |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-commonRed Hat:enterprise_linux:5::client |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-swatRed Hat:enterprise_linux:5::client |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
sambaRed Hat:enterprise_linux:5::server |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-clientRed Hat:enterprise_linux:5::server |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-commonRed Hat:enterprise_linux:5::server |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
samba-swatRed Hat:enterprise_linux:5::server |
before 0:3.0.28-1.el5_2.1 | 0:3.0.28-1.el5_2.1 |
cifs-utilsopenSUSE:Tumbleweed From an advisory covering 16 CVEs |
before 6.13-1.3 | 6.13-1.3 |
sambaopenSUSE:Tumbleweed From an advisory covering 66 CVEs |
before 4.14.6+git.182.2205d5224e3-1.1 | 4.14.6+git.182.2205d5224e3-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC) | 2008-06-01 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1105 is a high vulnerability (CVSS 7.5) in Samba, published May 29, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 69.1%, the 99th percentile. Fixed in samba 1:3.0.30-1.
References
redhat.com/support/errata/RHSA-2008-0288.html
secunia.com/advisories/30478
support.apple.com/kb/HT2163
Show 129 moreShow less
vupen.com/english/advisories/2008/2639
securitytracker.com/id?1020123
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5733
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.473951
exchange.xforce.ibmcloud.com/vulnerabilities/42664
www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01475657
exploit-db.com/exploits/5712
lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
sunsolve.sun.com/search/document.do?assetkey=1-26-249086-1
mandriva.com/security/advisories?name=MDVSA-2008:108
securityfocus.com/archive/1/492683/100/0/threaded
ubuntu.com/usn/usn-617-2
xerox.com/downloads/usa/en/c/cert_XRX08_009.pdf
wiki.rpath.com/Advisories:rPSA-2008-0180
security.gentoo.org/glsa/glsa-200805-23.xml
lists.opensuse.org/opensuse-security-announce/2008-06/msg00000.html
lists.vmware.com/pipermail/security-announce/2008/000023.html
samba.org/samba/security/CVE-2008-1105.html
debian.org/security/2008/dsa-1590
nvd.nist.gov/vuln/detail/CVE-2008-1105
github.com/advisories/GHSA-38xm-32fr-cm7j
security-tracker.debian.org/tracker/CVE-2008-1105
access.redhat.com/errata/RHSA-2008:0288
bugzilla.redhat.com/show_bug.cgi?id=446724
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0288.json
cve.org/CVERecord?id=CVE-2008-1105
suse.com/security/cve/CVE-2006-1059